Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #8
Security experts seek full checklist for Google account recovery
Original: Any # infosec or # Google folks know of an authoritative checklist of every way someone can persist in access a # Google
A security practitioner is asking the infosec community for an authoritative checklist covering every way an attacker can maintain access to a Google account after a phishing incident. The account owner fell for a Google phishing attack; passwords have been changed and moved to a non-Google password manager, and other access methods invalidated. The request highlights how many persistence routes, such as app passwords, sessions and recovery options, need checking after a compromise.
Why now: Google phishing attacks remain common and account recovery after compromise is genuinely difficult to do exhaustively.
Evidence
- Any # infosec or # Google folks know of an authoritative checklist of every way someone can persist in access a # GoogleAccount ? Someone fell for a Google phishing attack, and I’ve changed their passwords while shifting to a non-Google password manager, invalidated other… · deFractal@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/764193